$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: M8Sk7z+fUHrMYHIO3PXs1uoc/RQGNNBUeUlwkf+CTf4= Subject key identifier: 2E:1C:EF:30:96:51:AB:08:40:36:F6:A5:9D:E3:B2:CA:DE:40:95:91 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 6F388438DC3AE6551B61BAB615D22C490B390F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: E7 Signing time: Thu 07 Aug 2025 17:50:40 +0000 Manifest this update: Thu 07 Aug 2025 17:45:40 +0000 Manifest next update: Mon 11 Aug 2025 04:36:40 +0000 Files and hashes: 1: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: hzUucOCUo78zyUKS98s9J0uPUF8bXXsR9r2LtwyEvKA=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 04:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:38:84:38:dc:3a:e6:55:1b:61:ba:b6:15:d2:2c:49:0b:39:0f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Aug 7 17:45:40 2025 GMT Not After : Aug 11 04:36:40 2025 GMT Subject: CN=2E1CEF309651AB084036F6A59DE3B2CADE409591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:ff:db:92:63:7d:47:de:be:b8:6e:72:70: e4:c5:01:96:92:2d:68:17:be:bd:e2:28:87:60:9d: 7a:2b:72:05:41:a3:0a:5d:3a:ec:8f:ee:23:04:00: 64:96:b9:44:bf:66:c7:f1:be:de:93:c0:f0:47:b6: 4f:4a:bf:dc:cc:a4:2f:55:ec:1d:83:c8:72:83:e4: df:2f:34:e5:9b:6c:9d:01:a2:bc:da:f6:07:d6:75: 60:67:2c:1f:67:9a:9b:49:e5:b0:95:d1:09:01:7d: 0c:ee:d3:af:d8:d3:73:28:72:c1:b7:bb:c6:2a:05: 35:cf:b6:37:c3:b6:14:36:42:25:9d:8a:30:c4:48: 2e:83:ea:6c:0f:ec:5b:19:b3:a3:41:2f:da:58:7a: 31:37:16:63:56:f2:6d:2c:4b:c7:29:f7:c4:73:07: 4b:2b:3b:df:78:58:99:f4:d9:14:09:21:89:f4:a8: fb:c0:7b:76:47:68:ac:dd:35:03:27:09:4d:6c:f8: e7:2e:28:44:b9:b9:28:6a:4c:38:39:ee:69:ed:43: 9e:71:05:52:cc:31:7a:d7:a9:06:4d:b2:9d:f2:03: 62:85:a3:c8:76:33:72:1f:4c:c3:67:0e:35:27:ca: c6:f5:28:53:be:3a:87:86:f2:5d:14:07:ab:95:2d: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:EF:30:96:51:AB:08:40:36:F6:A5:9D:E3:B2:CA:DE:40:95:91 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:c1:2a:1a:7c:e4:0a:ad:67:d6:30:c8:6c:f7:50:d1:bf: 39:74:cb:47:37:c8:5d:1c:3b:9a:bd:86:16:37:b9:18:cf:42: b8:72:de:e2:41:8e:91:08:a1:b6:2d:45:29:1a:73:69:ab:69: a8:42:51:0f:b0:97:97:75:39:f0:38:36:74:03:96:d6:b3:ee: 1d:a3:09:8c:2f:5b:67:a2:fd:e1:53:0a:63:e7:a6:38:15:1a: b7:b2:6a:c3:83:c7:02:6e:3e:87:6a:51:60:9c:aa:7b:08:28: be:6e:d4:76:2d:d7:15:71:01:2e:ef:d4:e1:2d:fe:1c:81:38: d2:65:f4:ee:e8:f9:ea:e3:8c:77:f0:bf:37:e4:42:f9:68:92: 5d:92:9e:2d:3e:42:b3:25:d5:c7:6e:cf:37:df:8b:ea:60:9c: 2a:7e:89:60:ae:2d:90:8b:5e:1b:08:8a:d4:c5:ab:c1:4a:7b: a8:7f:72:d6:b4:aa:fc:f8:cb:4d:94:3d:69:e5:0b:c3:84:fa: c4:66:1b:c5:c7:da:20:d7:d3:99:5e:d5:50:5c:31:b1:1a:4f: 09:51:d7:b2:cb:00:54:95:81:5b:d6:d7:59:a4:8f:5c:e7:99: a0:23:29:bf:72:e5:58:de:ae:11:d8:60:2c:6b:69:0e:7a:d5: 74:76:58:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbziEONw65lUbYbq2FdIsSQs5Dw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA4MDcxNzQ1NDBaFw0yNTA4MTEwNDM2NDBaMDMxMTAvBgNV BAMTKDJFMUNFRjMwOTY1MUFCMDg0MDM2RjZBNTlERTNCMkNBREU0MDk1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgP/bkmN9R96+uG5ycOTFAZaS LWgXvr3iKIdgnXorcgVBowpdOuyP7iMEAGSWuUS/Zsfxvt6TwPBHtk9Kv9zMpC9V 7B2DyHKD5N8vNOWbbJ0Borza9gfWdWBnLB9nmptJ5bCV0QkBfQzu06/Y03MocsG3 u8YqBTXPtjfDthQ2QiWdijDESC6D6mwP7FsZs6NBL9pYejE3FmNW8m0sS8cp98Rz B0srO994WJn02RQJIYn0qPvAe3ZHaKzdNQMnCU1s+OcuKES5uShqTDg57mntQ55x BVLMMXrXqQZNsp3yA2KFo8h2M3IfTMNnDjUnysb1KFO+OoeG8l0UB6uVLTWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhzvMJZRqwhANvalneOyyt5AlZEwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZPwSoafOQKrWfWMMhs91DRvzl0y0c3yF0c O5q9hhY3uRjPQrhy3uJBjpEIobYtRSkac2mraahCUQ+wl5d1OfA4NnQDltaz7h2j CYwvW2ei/eFTCmPnpjgVGreyasODxwJuPodqUWCcqnsIKL5u1HYt1xVxAS7v1OEt /hyBONJl9O7o+erjjHfwvzfkQvlokl2Sni0+QrMl1cduzzffi+pgnCp+iWCuLZCL XhsIitTFq8FKe6h/cta0qvz4y02UPWnlC8OE+sRmG8XH2iDX05le1VBcMbEaTwlR 17LLAFSVgVvW11mkj1znmaAjKb9y5VjerhHYYCxraQ561XR2WEg= -----END CERTIFICATE-----Generated at Sat Aug 9 23:10:30 2025 by rpki-client